3GPP-无线局域网异构互联的认证信令优化

The Optimized Authentication Signaling Flow for 3GPP-WLAN Heterogeneous Interworking

针对3GPP-WLAN互联网络的认证协议EAP-AKA,首先建立了3GPP-WLAN用户通过无线局域网(WLAN)实现接入的认证数学模型.通过分析指出,3GPP AAA服务器每次从认证中心获取认证矢量(AV)的数目K与重认证次数对认证信令开销所带来的影响.在考虑了重认证次数影响后,提出了一个新的自适应K选择机制,该机制利用终端在前一WLAN中总的认证次数、重认证次数和K来预测推断当前WLAN中所需的K值.仿真结果表明,新的机制相比固定的K选择机制能更有效降低由获取AV所带来的信令开销.

This paper mainly focuses on the authentication protocol EAP-AKA（Extensible Authentication Protocol Method for UMTS Authentication and Key Agreement） in the integration of 3GPP（The Third Generation Partnership Project）and WLAN（Wireless Local Network）. An authentication mathematical model for 3GPP-WLAN was established. Through analyzing the authentication protocol, it is pointed out that the number K of AVs （authentication vectors） obtained from authentication center every time and the number of re authentication can affect the authentication signaling cost. A novel adaptive K select mechanism was proposed by considering the re authentication procedure. The novel scheme utilizes the terminal＇s total authentication times, the number of re authentication and the value of K in previous WLAN to infer the proper value of K in current WLAN. The simulation result shows that the new scheme can efficiently reduce the authentication signaling cost compared with the fixed K authentication mechanism.